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Response to May 8. 2006 Office Action Attorney Dkt: 3037-4190 

REMARKS 

Reconsideration and allowance of the claims rejected in the subject Office Action are 
requested 

Claim 68 is objected to because of an informality. 

Claims 63, 64 and 66 have been rejected under 35 USC 112, second paragraph for 
indefmiteness. 

Claims 56-61 have been rejected under 35 USC 103 (a) as unpatentable over Korn, of 
record in view of W3C, of record. 

Claims 62-66 have been rejected under 35 USC 103 (a) as unpatentable over Korn in 
view of W3C and in further view of Core Web Programming, Chapter 14, entitled "Concurrent 
Programming Using JAVA Threads" by M. Hall, published by Prentice Hall PTR, Saddle River, 
NJ, 1998 . 

Applicants respond to indicated paragraphs of the subject Office Action, as follows: 
Paragraphs 1-5: 

The Examiner's Remarks are informative and no response is necessary or required. 
Paragraph 6: 

Applicants have amended Claim 66 to overcome the objection. Withdrawal of the 
objection is requested. 
Paragraphs 7-10. 

Applicants have amended claims 63, 64 and 66 to overcome the rejection for 
indefmiteness. Withdrawal of the rejection of claims 63, 64 and 66 are requested. 
Paragraph 1 1 : 

Applicants traverse the rejection of claims 56-61, 67 and 68 based on Korn, of record in 
view of W3C , as follow:. 
Paragraph 12 : 

A. Claim 56, as amended, includes features not disclosed or suggested in Korn in 
view of W3C:, and overcomes the rejection under 35 USC 103 (a), as follows; 

(i) "storing a modified web page in a web server including a hypertext object having 
a reference to a decryption program and a reference to an encrypted script;" 

The Examiner acknowledges Korn does not disclose storing a reference to an encrypted 
script in a web page, but argues it would be obvious in view of W3C for a worker skilled in the 
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art to store a hypertext object in a web page referencing an encrypted script. However, Korn at 
col. 3, lines 15-18 discloses such hypertext object would reference an original script with 
appended hash commands, not an encrypted script. The hashed commands and the original script 
subsequently may be encrypted to hide a pubic key protecting the hashed commands appended to 
the script. Korn does not teach a worker skilled in the art to store an encrypted script. 

(ii) "sending a first URL request to the web server for the modified web page by a 
web browser in a computer;" 

Korn at col. 3, lines 35-37 discloses a user visiting a web server downloads a web page 
containing interactive content. Korn does not disclose a user sending a request to a web server 
for a web page 

(iii) "receiving the first URL request at the web server and fetching the modified web 
page for a first download to the web browser;" 

There is no basis in Korn for the web server to receive a URL and fetch a modified page. 
The user completes this task by visiting the web site and downloading the web page containing 
interactive controls. 

(iv) "sending a second URL request to the web server initiated by the user for the 
decryption program;" 

The Examiner acknowledges that Korn does not disclose sending a second or third 
request to the web server for the decryption program, but argues in view of W3C it would be 
obvious to a worker skilled in the art to submit a second request for a decryption program after 
the web page is downloaded. Again, Korn at col. 3, lines 35-38 discloses a downloaded web page 
contains interactive controls and a user by clicking on the controls can obtain access to a 
decryption program without sending a request to the web server. There is no basis in Korn for a 
worker skilled in the art to send a second request to the web server for a decryption program. 

(v) "receiving the second URL request at the web server and fetching the decryption 
program for a second download to the web browser;" 

As indicated in item (iv), the user has downloaded interactive controls from the web 
server and can fetch a decryption program without the assistance of the web server. There is no 
basis in Korn for the web server to fetch the decryption program for a second download to the 
web browser. The web browser fetches the decryption program via the interactive controls 
downloaded to the web browser by the web server 
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(vi) "retrieving the URL reference to the encrypted script in the modified web page by 
the web browser;" 

Korn discloses the downloaded modified web page includes interactive controls. There is 
no reference in the modified page to a URL for retrieving an encrypted script. 

(vii) "sending a third URL request to the web server initiated by a runtime 
environment for the encrypted script;" 

By downloading the interactive controls to a web browser, the web browser has access to 
an encrypted script. There is no basis in Korn or W3C for the web browser or a run-time 
environment to send a third URL for an encrypted script. 

(viii) "receiving the third URL request by the web server and fetching the encrypted 
script for a third download to the run-time environment;" and 

The interactive controls enable the web browser or a run-time environment to download 
an encrypted script without the web server fetching the script for a third download. 

(ix) "decrypting the encrypted script by the run-time environment to produce a script 
for transmittal to the web browser ready for execution." 

Korn at col. 3, lines 50 - 65 discloses the script whether decrypted or not is not ready for 
execution until the hash commands appended to the script in the web server are compared to and 
found identical to the hash commands in the web browser. Applicants at page 9, lines 12-14 
disclose the script is executed by the web browser after the script is decrypted by the run time 
environment. There is no hashing of commands or comparing hashing command to execute a 
script in the present invention as in the case of Korn. 

Summarizing, Korn in view of W3C discloses (i) a script including appended hash 
commands available to a web browser from a modified web page including interactive controls; 
(ii) the hash commands and the script being encrypted using private and public keys (iii) the 
interactive controls being signed to hide the keys; (iv) the modified web page being downloaded 
by a web browser for decrypting the hash commands and the script, and (v) executing the script 
after the hashed commands originated by a web server are found identical to hash commands 
originated by a web browser. 

Korn in view of W3C fails to disclose suggest or teach (i) a web server storing a 
modified web page including a reference to a decryption program and a reference to an 
encrypted scripted; (ii) the decryption program and the encrypted script downloaded to a web 
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browser on separate requests by a web browser or run-time environment; (iii) the encrypted 
script being transmitted to the web browser by the web server for detection and decryption by a 
run-time environment, and (iv) return of the decrypted program by the run-time environment to 
the web browser for execution. A worker skilled in the art without the teachings of (i) - (iv) 
would have no basis to implement the claimed subject matter. 

Korn modified by W3C performing the claimed subject matter would be inoperative due 
to (a) performing unnecessary steps in responding to web browser requests for a decryption 
program and an encrypted script; (b) the absence of the public and private key functions in 
encrypting and decrypting the hash commands and the script (c) the absence of a run time 
environment for decrypting the hash commands and the script, and (d) the absence of comparing 
hash commands by a web server and a web browser for execution of a decrypted script. 

The cited art fails to disclose, suggest or teach the claimed subject matter of Claims 56 
for the reasons (i) - (iv) indicated above. The rejection of claim 56 under 35 USC 103 (a) is 
without support in the cited art. Withdrawal of the rejection and allowance of claim 56 are 
requested 
Paragraph 3 : 

A. Claim 57 : 

(i) "detecting in the first download by the web browser a URL reference in 
the modified web page to a decryption program." 

Korn at col. 3, lines 37-38, discloses a user visiting a website and downloading a 
web page containing interactive content. The interactive control is not equivalent to a URL 
reference, since it is a set of rules for how applications should share information, and not an 
address of a resource. Korn, in view of WC3, fails to disclose a modified web page, including a 
URL reference to a description program. In any case, claim 57 depends from claim 56 and is 
patentable over the cited are on the same basis as claim 56. 
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Paragraph 4 : 

A. Claim 58 : 

(i) "detecting in the second download by the web browser a URL reference to 
an encrypted script in the modified web page." 

Korn, in view of WC3, fails to disclose the subject matter of claim 58 for similar 
reasons to those indicated in connection with the consideration of claim 57. Claim 58 depends 
from claim 56 and is patentable on the same basis as claim 56. 
Paragraph 5 : 

A. Claim 59 : 

(i) "invoking the decryption program with the reference to the encrypted 
script by the web browser for execution by the run-time environment." 

Korn, at col. 3, lines 44-60, discloses the decryption program is primarily invoked 
to decrypt the hash commands and not the script. Moreover, the description is done by the web 
browser and not the client computer executing in a one time environment. Korn, in view of 
WC3, fails to disclose, suggest or teach the features of claim 59 for the reasons previously 
indicated. The rejection of claim 59 under 35 USC 103(a) is without support in the cited art. 
Withdrawal of the rejection and allowance of claim 59 are requested. 
Paragraph 6 : 

A. Claim 60 : 

(i) "the web browser is a multi-tasking browser. 

Applicants can find no disclosure in Korn, at col. 1, lines 12-13 and col. 2, line 
35, wherein, the web browser is a multi-tasking browser. However, assuming that the cited 
browser is capable of operating in a multi-tasking mode, there is no inter-operation between the 
web server and web browser, after the download of the modified web page. In any case, claim 60 
depends from claim 56 and is patentable on the same basis as claim 56. 
Paragraph 7 : 

A. Claim 61 : 

(i) "the run-time environment is a multi-tasking run-time environment." 

Korn does not disclose or suggest a run-time environment or operating in a multi- 
tasking mode. The lack of inter-operation between the web server and the web browser, after the 
initial download, would teach away from a multi-tasking run-time environment. In any case 
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claim 61 depends from claim 56 and is patentable over the cited references on the same basis as 
claim 56. 
Paragraph 8 : 

A. Claims 67 and 68 : 

Claims 67 corresponds to claim 56 and distinguishes over the cited art on the 
same basis as claim 56. 

Claim 68 describes a system embodiment of claim 56, and distinguishes over the 
cited art on the same basis as claim 56. 

Summarizing, Korn discloses a web server downloading a modified web page, 
including an interactive control to a web browser, enabling a user to encrypt and decrypt a script 
without resorting to submitting requests to a web server. In contrast, Applicants disclose the 
opposite mode of operation, involving submitting separate request to a web server by a web 
browser, for reasons for better control of encrypting and decrypting a script. Modifying the cited 
art to perform in the matter of claims 67 and 68 would be contrary to the objectives of the cited 
art in simplifying the encryption and decryption process for a script 
Paragraph 13 : 

A. Claims 62-66 : 

Claims 62-66 describe (i) launching concurrent tasks; (ii) a first concurrent task 
sends a second URL request to a web server for a decryption program; (iii) a second concurrent 
task sends a third URL request to the web server for an encrypted script; (iv) a multi-tasking run- 
time environment waits to detect the encrypted script, and (v) a multi-tasking browser triggers 
the multi-tasking environment to synchronize the first and second concurrent tasks. 

Applicants acknowledge that multi-tasking and concurrent tasks are known in the 
art, but there is no suggestion in the cited art nor has the Examiner identified any disclosure in 
the cited art to modify Korn to perform concurrent tasks in the manner described by claims 62- 
66. 

Moreover, the cited art fails the test of the Graham Factuals (MPEP 2141), in 
establishing a prima facie case of obviousness. First, the Examiner failed to provide a suggestion 
or motivation in the reference to alter restricting access to a script involving public and private 
keys with a method restricting access to a script without the use of keys. Further, the cited art 
requires the script commands to be hashed prior to encryption and compared to hashed 
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commands generated prior to decryption whereas the claimed subject does not require hashing of 
script commands Second, there is no reasonable expectation of success due to the different 
operating modes between the cited art and the claimed subject matter. Third, the references, 
when combined, do not teach or suggest all of the claimed limitations relative to the method of 
restricting access to a script e.g. successive requests to a web server by a web browser for a 
decryption program and an encrypted; a multi-tasking browser expediting the process; and a run 
time environment for decrypting a script, and a script ready for execution after decryption 
without comparing hash commands, etc. 

Summarizing, for the reasons indicated above, claims 62-66 include features not 
disclosed or suggested in Korn in view of W3C and in further view of Core Web Programming, 
Chapter 14. Applicants submit the rejection of claims 62-66 under 35 USC 103 (a) based on the 
cited art has been overcome 

Finally, Applicant notes for the Examiner's attention, that the Interview 
conducted September 21, 2005, indicated that claim limitations regarding multiple downloads of 
the decryption program and encrypted scripts by a user would overcome the references of record. 
The Examiner has not cited any new art relative to multiple downloads. The rejection of claims 
56-68 contravenes discussions at the Interview 
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CONCLUSION 

Applicant has rebutted the Examiner's position. The cited art fails to disclose, suggest or 
teach a worker skilled in the art to implement the claimed subject mater for the reasons 
previously indicated in the consideration of the Paragraphs in the Office Action. The rejection 
contravenes the comments made by the Examiner and Supervisory Examiner at the Interview 
conducted September 21, 2005 that describing multiple downloads in the claims would 
overcome the cited art. No new art has been cited in this regard. Applicant submits the cited art 
has been overcome. Entry of the amendment, allowance of the claims and passage to issue of the 
case are requested. 

AUTHORIZATION 

The Commissioner is hereby authorized to charge any additional fees which may be 
required for consideration of this Amendment to Deposit Account No. 13-4500, Order No.3037- 
4190. A DUPLICATE OF THIS DOCUMENT IS ATTACHED. 

In the event that an extension of time is required, or which may be required in addition to 
that requested in a petition for an extension of time, the Commissioner is requested to grant a 
petition for that extension of time which is required to make this response timely and is hereby 
authorized to charge any fee for such an extension of time or credit any overpayment for an 
extension of time to Deposit Account No 13-4500, Order No. 3037-4190. A DUPLICATE OF 
THIS DOCUMENT IS ATTACHED. 

Respectfully submitted, 
MORGAN & FINNEGAN, L.L.P. 

Dated: August 3, 2006 By: ') tfoyvh c , P-< ^ »- / 1- 

Joseph C. Redmond, Jr. 
Reg. No. 18,753 
Telephone: (202) 857-7887 
Facsimile: (202) 857-7929 

CORRESPONDENCE ADDRESS: 
Morgan & Finnegan LLP. 
3 World Financial Center 
New York, NY 10281-2101 
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